Re: Perhaps the most OBVIOUS question you will ever see.

From: S. Pidgorny (slavickp_at_yahoo.com)
Date: 01/28/05

  • Next message: tarquinlinbin: "Re: Perhaps the most OBVIOUS question you will ever see." 
    Date: Fri, 28 Jan 2005 19:29:12 +1100

    I'd just demonstrate why that is a big deal. If you have servers that are
    not totally secured, if you see applications credentials and data sent in
    clear and available to a guy in the parking lot - that will make the things
    a big deal.

    Until you show that the risk is actually a vulnerability, that will be just
    a risk - and the risk seems to be accepted by the business. For now. 

    -- 
Svyatoslav Pidgorny, MVP, MCSE
-= F1 is the key =-
"Curious George" <curious@spampoop.com> wrote in message
news:99hKd.1635$Vt6.340@fe10.lga...
> Dear Colleagues:
>
> Here is the problem.  My boss insists that its "no big deal" and that
since
> the servers are on the inside and protected, we really don't have a thing
to
> worry about.
  • Next message: tarquinlinbin: "Re: Perhaps the most OBVIOUS question you will ever see."

    Relevant Pages

    • RE: Bank pen test
      ... The bank will be working to Risk. ... A vulnerability on an internal system is not always a large risk. ... If they want a pen test of only 20 servers there is no way to know if the ... the veteran Network Behavior Analysis ...
      (Pen-Test)
    • Re: [fw-wiz] Isolating internal servers behind firewalls
      ... Does every desktop require access to every server's file share port, ... If you have a/or several intranet IIS servers, ... If one thinks Windows file sharing is not risky, then I have no basis to argue the point any further. ... information at risk. ...
      (Firewall-Wizards)
    • Re: Postfix smtpd DNS lookup delay
      ... the connection. ... Small risk, but still a risk. ... it may want to do logging based on the service configuration ... Many servers want to (or can be configured ...
      (alt.os.linux.suse)
    • Re: Perhaps the most OBVIOUS question you will ever see.
      ... If you have servers that are ... Until you show that the risk is actually a vulnerability, ... My boss insists that its "no big deal" and that ...
      (microsoft.public.pocketpc.wireless)
    • Re: Perhaps the most OBVIOUS question you will ever see.
      ... If you have servers that are ... Until you show that the risk is actually a vulnerability, ... My boss insists that its "no big deal" and that ...
      (microsoft.public.access.security)